U.S. government has abruptly closed its federal investigation into allegations that WhatsApp could access and store users’ encrypted messages. The probe, which was shut down on Tuesday, April 28, 2026, ended amidst controversy regarding the findings of the lead investigator and the subsequent reaction from senior officials.
1. The “Operation Sourced Encryption” Investigation
The investigation was led by a special agent within the Bureau of Industry and Security (BIS), a wing of the Commerce Department that oversees export controls.
- The Allegation: The probe was initiated following a whistleblower complaint to the SEC. It alleged that Meta maintains a “backdoor” or a tiered permission system that allows employees and contractors—specifically including thousands of workers in India—unencrypted access to user texts, photos, and recordings.
- The Findings: In an email sent to over a dozen federal officials in January 2026, the investigator claimed to have concluded that Meta can and does view and store WhatsApp content in an unencrypted format, contradicting the company’s “End-to-End Encryption” marketing.
- The Shutdown: Almost immediately after the investigator attempted to coordinate his findings with other agencies (like the DOJ and FBI), senior leadership at the BIS ordered the investigation closed, calling his claims “unsubstantiated” and outside the scope of his authority as an export agent.
2. Meta’s Official Response
Meta has vehemently denied the investigator’s claims, standing by its security architecture.
- Technical Defense: Meta spokesperson Andy Stone called the allegations “patently false,” stating that the very way WhatsApp is built makes it technically impossible for the company to read messages.
- Contractor Clarification: Security experts noted that if Meta had such a massive signals intelligence tool, they would never provide access to third-party contractors like Accenture, as the whistleblower alleged.
- Content Moderation: Meta maintains that the only messages its teams can see are those explicitly reported by a user, which forwards a small portion of the recent chat history to reviewers for safety purposes.
3. Lingering Legal & Global Challenges
While the Commerce Department’s investigation is closed, the fallout continues across other legal fronts:
| Jurisdiction | Current Status (April 2026) | Focus |
| U.S. Federal Court | Class Action Active | A major suit (Shirazi v. Meta) filed in California continues to seek discovery on these same privacy claims. |
| European Union | Antitrust Probe Active | The EC is currently forcing Meta to reopen WhatsApp to third-party AI assistants after it tried to ban them. |
| India | Supreme Court Monitoring | WhatsApp is participating in a “Digital Arrest” scam probe, recently banning 9,400 accounts impersonating law enforcement. |
4. Technical Context: End-to-End Encryption (E2EE)
To understand the controversy, it’s helpful to look at how the encryption is supposed to function versus the allegations:
- How it works: In a true E2EE system, the “keys” to unlock a message are stored only on the sender’s and receiver’s devices. The data passing through Meta’s servers is scrambled and unreadable.
- The Probe’s Claim: The investigator alleged that Meta intercepts the data before it is encrypted or stores a copy of the unencrypted content via a “server-side” vulnerability. This remains unproven and rejected by Meta.